General

  • Target
    beb0b29463344e23a00cb561a607c85958b1eef361b939656fce22942c4e7c2b.exe
  • Size 8.3MB
  • Sample260603-vgxdlsds2k
  • SHA256 beb0b29463344e23a00cb561a607c85958b1eef361b939656fce22942c4e7c2b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • needle_stealer

C2
  • http://130.12.180.135:3000/api/v2

Attributes
  • api_key

    alk_2f668968ee87e7d30f8b996112bebef880cfe8626af9c1d8d53e0f719e47be4f

  • base_extension

    false

  • self_destruct

    false

Targets

    • Target
      beb0b29463344e23a00cb561a607c85958b1eef361b939656fce22942c4e7c2b.exe
    • Size 8.3MB
    • SHA256 beb0b29463344e23a00cb561a607c85958b1eef361b939656fce22942c4e7c2b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v16

Tasks